3 # Copyright (c) 2006 - 2008 Kungliga Tekniska Högskolan
4 # (Royal Institute of Technology, Stockholm, Sweden).
7 # Redistribution and use in source and binary forms, with or without
8 # modification, are permitted provided that the following conditions
11 # 1. Redistributions of source code must retain the above copyright
12 # notice, this list of conditions and the following disclaimer.
14 # 2. Redistributions in binary form must reproduce the above copyright
15 # notice, this list of conditions and the following disclaimer in the
16 # documentation and/or other materials provided with the distribution.
18 # 3. Neither the name of the Institute nor the names of its contributors
19 # may be used to endorse or promote products derived from this software
20 # without specific prior written permission.
22 # THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
23 # ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
24 # IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25 # ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
26 # FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
27 # DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
28 # OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
29 # HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
30 # LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
31 # OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
41 testfailed
="echo test failed; cat messages.log; exit 1"
43 # If there is no useful db support compile in, disable test
44 ..
/db
/have-db ||
exit 77
53 kadmin
="${TESTS_ENVIRONMENT} ../../kadmin/kadmin -l -r ${R}"
54 kdc
="${TESTS_ENVIRONMENT} ../../kdc/kdc --addresses=localhost -P $port"
56 server
=host
/datan.test4.h5l.se@TEST4.H5L.ORG
57 cache
="FILE:${objdir}/cache.krb5"
59 kinit
="${TESTS_ENVIRONMENT} ../../kuser/kinit -c $cache --no-afslog"
60 klist
="${TESTS_ENVIRONMENT} ../../kuser/klist -c $cache"
61 kgetcred
="${TESTS_ENVIRONMENT} ../../kuser/kgetcred -c $cache"
62 kdestroy
="${TESTS_ENVIRONMENT} ../../kuser/kdestroy -c $cache --no-unlog"
64 KRB5_CONFIG
="${objdir}/krb5.conf"
74 echo Creating database
75 initflags
="init --realm-max-ticket-life=1day --realm-max-renewable-life=1month"
77 ${kadmin} ${initflags} ${R} ||
exit 1
78 ${kadmin} ${initflags} ${R2} ||
exit 1
79 ${kadmin} ${initflags} ${R3} ||
exit 1
80 ${kadmin} ${initflags} ${R4} ||
exit 1
82 ${kadmin} add
-p foo
--use-defaults foo@
${R} ||
exit 1
84 ${kadmin} add -p cross1 --use-defaults krbtgt/${R2}@${R} ||
exit 1
85 ${kadmin} add -p cross2 --use-defaults krbtgt/${R3}@${R2} ||
exit 1
86 ${kadmin} add -p cross3 --use-defaults krbtgt/${R4}@${R3} ||
exit 1
88 ${kadmin} modify --attributes=+ok-as-delegate krbtgt/${R2}@${R} ||
exit 1
89 ${kadmin} modify --attributes=+ok-as-delegate krbtgt/${R3}@${R2} ||
exit 1
91 ${kadmin} add
-p foo
--use-defaults host
/server.test3.h5l.se@
${R3} ||
exit 1
92 ${kadmin} modify
--attributes=+ok-as-delegate host
/server.test3.h5l.se@
${R3} ||
exit 1
93 ${kadmin} add
-p foo
--use-defaults host
/noserver.test3.h5l.se@
${R3} ||
exit 1
95 ${kadmin} add
-p foo
--use-defaults host
/server.test4.h5l.se@
${R4} ||
exit 1
96 ${kadmin} modify
--attributes=+ok-as-delegate host
/server.test4.h5l.se@
${R4} ||
exit 1
98 echo "Doing database check"
99 ${kadmin} check
${R} ||
exit 1
100 ${kadmin} check
${R2} ||
exit 1
101 ${kadmin} check
${R3} ||
exit 1
102 ${kadmin} check
${R4} ||
exit 1
104 echo foo
> ${objdir}/foopassword
110 sh
${srcdir}/wait-kdc.sh
111 if [ "$?" != 0 ] ; then
116 trap "kill -9 ${kdcpid}; echo signal killing kdc; exit 1;" EXIT
120 echo "Getting client initial tickets"; > messages.log
121 ${kinit} --password-file=${objdir}/foopassword foo@${R} || \
122 { ec
=1 ; eval "${testfailed}"; }
124 echo "get cross realm manually"
125 ${kgetcred} krbtgt/${R2}@${R} || { ec=1 ; eval "${testfailed}"; }
126 ${kgetcred} krbtgt/${R3}@${R2} || { ec=1 ; eval "${testfailed}"; }
127 ${kgetcred} krbtgt/${R4}@${R3} || { ec=1 ; eval "${testfailed}"; }
128 ${kgetcred} host/server.test3.h5l.se@${R3} || { ec=1 ; eval "${testfailed}"; }
129 ${kgetcred} host/server.test4.h5l.se@${R4} || { ec=1 ; eval "${testfailed}"; }
132 ${klist} -v | grep -A8 -e 'Server:.*host/server.test3' | grep 'Ticket flags:.*ok-as-delegate' > /dev/null || { ec=1 ; eval "${testfailed}"; }
133 ${klist} -v | grep -A8 -e 'Server:.*host/noserver.test3' | grep 'Ticket flags:.*ok-as-delegate' 2> /dev/null && { ec=1 ; eval "${testfailed}"; }
134 ${klist} -v | grep -A8 -e 'Server:.*server.test4' | grep 'Ticket flags:.*ok-as-delegate' 2> /dev/null && { ec=1 ; eval "${testfailed}"; }
138 #echo "Getting client initial tickets"; > messages.log
139 #${kinit} --password-file=${objdir}/foopassword foo@${R} || \
140 # { ec=1 ; eval "${testfailed}"; }
142 #echo "get cross realm automagicly"
143 #${kgetcred} host/server.test4.h5l.se@${R4} || { ec=1 ; eval "${testfailed}"; }
146 #${klist} -v | grep -A8 -e 'Server:.*server.test4' | grep 'Ticket flags:.*ok-as-delegate' && { ec=1 ; eval "${testfailed}"; }
151 echo "killing kdc (${kdcpid})"
152 sh
${srcdir}/leaks-kill.sh kdc
$kdcpid ||
exit 1